CVE-2026-10003 is a high-severity use-after-free vulnerability in the Views component of Google Chrome prior to version 148.0.7778.216. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, potentially leading to arbitrary code execution. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is fixed in Chrome version 148.0.7778.216 as indicated by the stable channel update from Google.

Successful exploitation can lead to arbitrary code execution in the context of the affected Chrome process, compromising confidentiality, integrity, and availability of the user's system. The attack requires user interaction and a crafted HTML page. No known exploits in the wild have been reported, reducing immediate risk but the potential impact remains high.

Users should update Google Chrome to version 148.0.7778.216 or later, where this vulnerability is fixed. Since this is a client-side vulnerability requiring user interaction, applying the official update is the primary mitigation. No additional vendor advisory details on temporary mitigations or workarounds are provided.